Privacy Policy

1. Introduction

1mjudi ("we", "our", "us", "the Company") operates the online gaming platform accessible at 1mjudi.asia (the "Platform"). We are committed to protecting the personal data of all individuals who interact with the Platform, including registered members, visitors, and applicants.

This Privacy Policy ("Policy") sets out the basis on which 1mjudi collects, uses, stores, transfers, and protects personal data. It applies to all personal data submitted to or collected by the Platform, regardless of the medium or channel through which it is received. By accessing or using the 1mjudi Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data in the manner described herein.

This Policy is to be read in conjunction with the 1mjudi Terms & Conditions. Defined terms used in this Policy have the same meaning as in the Terms & Conditions unless otherwise specified.

2. Data Controller

For the purposes of applicable data protection law, 1mjudi acts as the data controller in respect of personal data collected through the Platform. As data controller, 1mjudi determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable privacy legislation and international data protection standards.

If you have questions regarding our data controller role or wish to exercise any of your data subject rights described in this Policy, you may contact us via the details set out in Section 14 (Contact) below.

3. Personal Data We Collect

1mjudi collects and processes the following categories of personal data, to the extent that such data is provided by you or generated through your use of the Platform:

• Identity Data: Full legal name, date of birth, nationality, gender, government-issued identification number (where required for KYC verification), and copies of identification documents such as MyKad or passport.
• Contact Data: Email address, mobile phone number, and residential address (including postcode, city, and state within Malaysia or internationally).
• Account Data: Username, hashed password credentials, account preferences, communication preferences, VIP tier status, and security question responses.
• Financial Data: Bank account details (for withdrawal processing), e-wallet identifiers (Touch n Go eWallet, Boost, GrabPay), transaction history including deposits, withdrawals, bonus credits, and adjusted balances. We do not store full payment card numbers; card processing is handled by certified third-party payment processors.
• Gaming Activity Data: Bet histories, game session records, wagering volumes, win/loss records, responsible gaming tool settings (deposit limits, loss limits, self-exclusion status), and session timestamps.
• Technical Data: IP address, device identifiers, browser type and version, operating system, screen resolution, time zone, referring URL, and session duration.
• Communications Data: Records of your interactions with 1mjudi support via live chat, email, or any other channel, including the content of those communications.
• Marketing Data: Your preferences regarding receiving promotional communications from 1mjudi and records of any marketing campaigns you have engaged with.

4. How We Collect Personal Data

1mjudi collects personal data through the following means:

• Direct provision by you: When you register an account, complete identity verification, make a deposit or withdrawal, contact support, respond to a survey, or enter a promotion.
• Automated technical collection: Through cookies, web beacons, pixel tags, and server log files when you access or navigate the Platform. See Section 9 (Cookies & Tracking) for full details.
• Third-party sources: From identity verification providers, payment processors, fraud prevention services, and publicly available sources where necessary to fulfil legal obligations or verify the accuracy of information you have provided.

5. Purpose and Legal Basis for Processing

1mjudi processes personal data for the following purposes, each supported by a lawful basis under applicable data protection law:

• Account Management (Contract Performance): To register your account, verify your identity, process your transactions, and deliver the gaming services you have contracted for. This processing is necessary for the performance of our contract with you.
• Payment Processing (Contract Performance): To process deposits and withdrawals via your selected payment methods, including Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, GrabPay, and USDT TRC20.
• Legal and Regulatory Compliance (Legal Obligation): To comply with anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, responsible gaming regulatory requirements, and any other applicable legal obligations. This includes age verification to enforce the 21+ (🔞) access restriction.
• Fraud Prevention and Security (Legitimate Interest): To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct as described in the Terms & Conditions. 1mjudi has a legitimate interest in protecting the Platform and its members from financial crime.
• Platform Improvement (Legitimate Interest): To analyse usage patterns, diagnose technical issues, and improve the functionality, performance, and user experience of the 1mjudi Platform.
• Marketing (Consent): To send you promotional offers, bonus notifications, and news about new games or features at 1mjudi, where you have provided consent. You may withdraw consent at any time by updating your communication preferences in your account settings.
• Responsible Gaming (Legal Obligation / Legitimate Interest): To monitor gaming activity for indicators of problem gambling and to enforce responsible gaming tools you have activated. This processing is both a regulatory obligation and a legitimate operational interest of 1mjudi.

6. Sharing of Personal Data

1mjudi does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment Processors: Banks, e-wallet providers, and payment gateway operators who process your deposit and withdrawal transactions. These entities act as independent data controllers in respect of payment processing data.
• Identity Verification Providers: KYC and AML service providers who assist in verifying your identity and assessing financial crime risk.
• Technology Service Providers: Cloud infrastructure providers, game content licensors, and software vendors who deliver or support the technical operation of the Platform. These providers are engaged as data processors and are contractually bound to handle your data only in accordance with our instructions.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or legitimate regulatory request. 1mjudi will take reasonable steps to notify you of such disclosure unless legally prohibited from doing so.
• Business Succession: In the event of a merger, acquisition, or sale of all or substantially all of the Company's assets, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

7. International Data Transfers

The 1mjudi Platform operates under international gaming authority licensing frameworks, which may involve the transfer of personal data to countries outside Malaysia. Where such transfers occur, 1mjudi ensures that appropriate safeguards are in place, including contractual protections equivalent to those required under applicable data protection standards. By using the Platform, you acknowledge and consent to such transfers as described in this Policy.

8. Data Retention

1mjudi retains personal data for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, and operational requirements. The following general retention periods apply:

• Account and Transaction Data: Retained for a minimum of 5 years from the date of account closure or the date of the last transaction, whichever is later, to satisfy AML and KYC regulatory record-keeping obligations.
• Gaming Activity Records: Retained for a minimum of 5 years from the date of activity for regulatory audit purposes.
• Support Communications: Retained for 3 years from the date of the last interaction unless the content is required for longer retention due to an ongoing dispute or regulatory review.
• Marketing Data: Retained until you withdraw consent or update your marketing preferences, after which data is suppressed rather than deleted to respect opt-out records.
• Technical and Log Data: Retained for up to 12 months for security, fraud detection, and performance analysis purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

9. Cookies and Tracking Technologies

The 1mjudi Platform uses cookies and similar tracking technologies to operate certain Platform features, remember your preferences, and analyse usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled without materially impairing Platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, display preferences, and remembered login state (where enabled).
• Analytics Cookies: Used to collect aggregated data on how members use the Platform, which pages are visited most frequently, and how users navigate between sections. This data is used to improve Platform performance and user experience.
• Marketing Cookies: Used to track whether members have engaged with specific promotional content so that 1mjudi can measure campaign effectiveness and avoid sending repetitive communications. These cookies are only activated with your consent.

You may control cookie settings through your browser preferences. Note that disabling certain cookies may affect Platform functionality. Strictly necessary cookies cannot be disabled through browser settings without logging out of your account.

10. Your Data Subject Rights

Subject to applicable data protection law, you have the following rights in respect of your personal data held by 1mjudi:

• Right of Access: You may request a copy of the personal data 1mjudi holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Certain data (such as name and date of birth) can be updated directly from your account settings. Other corrections may require identity verification.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 1mjudi's legal retention obligations (see Section 8).
• Right to Restriction: You may request that 1mjudi restrict processing of your personal data in certain circumstances, such as while a rectification request is being resolved.
• Right to Data Portability: Where processing is based on your consent or contract performance, you may request that your data be provided in a structured, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including direct marketing. Objection to marketing will be honoured without condition.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact 1mjudi via the details in Section 14. We will respond within a reasonable period consistent with applicable law, and in any event within 30 days of receiving a verifiable request. Identity verification may be required before a request is fulfilled.

11. Security Measures

1mjudi implements technical and organisational security measures appropriate to the risk profile of the personal data we process. These measures include:

• TLS encryption on all Platform pages and API endpoints to protect data in transit.
• Bcrypt or equivalent one-way hashing of all member passwords. No plain-text password storage at any stage.
• Access controls limiting internal staff access to personal data on a strict need-to-know basis, with all internal access logged for audit purposes.
• Regular security assessments and penetration testing of Platform infrastructure.
• Tokenisation of payment instrument details — full card numbers and bank credentials are not stored on 1mjudi servers.

Notwithstanding these measures, no data transmission over the internet is completely secure. 1mjudi cannot guarantee absolute security of data transmitted to or from the Platform and accepts no liability for unauthorised third-party interception of data outside our controlled infrastructure.

12. Minors

The 1mjudi Platform is strictly prohibited to persons under the age of 21 (🔞 21+). We do not knowingly collect personal data from individuals under 21 years of age. If we become aware that personal data has been collected from a person under 21 without proper age verification, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the Platform, please contact us immediately via the details in Section 14.

13. Changes to This Policy

1mjudi reserves the right to amend this Privacy Policy at any time. Material changes will be communicated by email to your registered address and/or by a notice posted on the Platform prior to the effective date of the change. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you should close your account and cease using the Platform.

14. Contact

For any privacy-related queries, data subject rights requests, or concerns about how 1mjudi handles your personal data, please contact us via live chat on the Platform (available 24/7) or by email at the address listed in the footer of this page. We aim to acknowledge all privacy queries within 2 business days and to provide a substantive response within 30 days.